bmad-product-brief
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core purpose and local file/script behavior are broadly consistent with a product-brief skill, and the explicit uv dependency is official and verifiable. The main concerns are transitive invocation of other skills, execution of unseen local scripts, and unresolved external handoff/tool registry destinations, which make the skill's effective footprint larger and less reviewable than the visible instructions alone.
Confidence: 83%Severity: 52%
Audit Metadata